The Facts - TikTok Privacy Policy Explained
The data security experts at Wisetek have examined TikToks Privacy Policy and have explained what type of information TikTok is collecting from your device and how this could be potentially harmful in the wrong hands ;
"The TikTok app collects a significant amount of data, far more than the average person would realize especially when you consider the vast majority of TikTok users are relatively young."
Key Points
- TikTok collects reams of data from its users, including Biometric information (Facial scanning, Fingerprint IDs)
- Code is used to scrape data such as passwords, credit card information and other information you type and is regularly being collected.
- TikTok tracks your behavior across different platforms.
- Content created on the platform or uploaded but left unpublished is still saved by TikTok.
The Information being collected:
User Content.
TikTok pre-saves user content, including images, videos, audio files, livestreams, comments and also harvests meta data like the creation date of the file, location, and creator.
Direct Messages.
All of your direct messages are saved by TikTok.
Your Contacts.
TikTok will collect information from your phone book and social media contacts, if given permission.
"Even if you don't agree to give TikTok your phone number, they can still access this information from another user - For example, I rejected TikTok's permission to access my phone number, however my friend granted them permission and the app then retrieves my phone number via their devices contact list, they now have a log of this information without me necessarily granting them permission."
Purchase Information
TikTok collects card payment information and purchase history.
Surveys, Research, and Promotions.
TikTok collects information from participants in surveys, research, promotions, contests, and events.
Information When You Contact Us.
TikTok collects information from users such as proof of identity or age, feedback or inquiries about your use of the Platform as well as information about possible violations of their Terms of Service.
Automatically Collected Information
Technical Information.
TikTok collects data on the device (i.e. device model, operating system, type of network connection), keystroke patterns, IP address, and system language, as well as performance information
"When you access a website link via the TikTok app, the TikTok app itself inserts a code that can then monitor most of the activity that occurs on these websites including keystroke information and what users select on the page. In theory, this type of tracking would make it possible for TikTok to view a users credit card information or passwords if entered" - Milica Vojnic, Data Security Expert @ Wisetek "This is done by inserting lines of Javascript into the websites visited via the apps in-built browser"
Location Information.
TikTok automatically collects location information using information from your SIM card and IP address.
Usage Information.
TikTok collects information about how users engage with the Platform, including content viewed, engagement with other users, search history, and settings.
Content Characteristics and Features.
TikTok collects and detects characteristics and features about the videos, images, and audio recordings that are part of your User Content for example, by identifying objects and scenery, the existence or location within an image of a face or other body parts; and the text of words spoken in your User Content. Tiktok states they do this for content moderation purposes and to provide special effects (such as video filters and avatars) and captions.
Inferred Information.
TikTok infers your attributes (such as age-range and gender) and interests based on the information to serve personalized ads based on your interests.
Cookies.
TikTok uses cookies and similar tracking technologies to operate the Platform. Identification and security, content personalization, remembering preferences, functionality, analytics, advertising and measurement, and promoting TikTok across other platforms and websites are all used to ensure the right user and prevent activity that violates our policies.
Information From Other Sources
Advertising, Measurement and Data Partners.
Partners share information with TikTok, including mobile identifiers, email addresses, and event information about the actions users have taken outside of the platform. Tiktok adds that some of their advertisers and other partners enable them to collect similar information directly from their website or app by integrating their TikTok Advertiser Tools.
Third Party Platforms and Partners.
Partners provide information such as a users email address, user ID, and public profile when you choose to sign up or log into the Platform using sign-in features provided by those third parties.
Others.
Where you are included or mentioned in user content, Direct Messages, complaints, appeals, and feedback, as well as the contact information provided by users are saved.
Points To Note - Biometric Data Concerns
In 2021 TikTok altered their privacy policy in order to allow them to collect "biometric identifiers and biometric information as defined under U.S. Laws, such as faceprints and voiceprints from your User Content" adding "Where required by law, we will seek any required permissions from you prior to any such collection"
"Biometric Data is basically any sort of information about a persons individuals physical characteristics, think of an iPhone's fingerprint and facial recognition technology for an example. When you consider the volume of popular face filters on TikTok, you can see how quickly the data would pile up. These filters work by scanning the users face via the devices camera and can be used to improve physical appearance or funny effects.
TikTok is pushing a new feature for advertisers on the platform called 'Focus Tracking' which is promising to only put ads in front of viewers that are "emotionally engaged" with the app, basically ensuring that they are properly focused on the app and not just occasionally glancing at the screen whilst watching TV or something to that effect. There's concern here for your average user as how will TikTok actually deliver this tool? Presumably, they'll make use of biometric information in order to properly gauge interest, tracking things like head position and eye movement"